Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json)
Hash identifier: M1DllQw6Xrsfn0VuDZtm414v15n1BaCThBwFiqAiO7k=
Subject key identifier: D0:1E:04:EF:BA:4E:65:B1:BC:B7:FB:82:79:F1:E3:B6:6D:10:E1:85
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 01A11B62D01562F16BCB89C72433B7397916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
Manifest number: 0D91
Signing time: Thu 08 Oct 2026 12:00:22 +0000
Manifest this update: Thu 08 Oct 2026 12:00:22 +0000
Manifest next update: Fri 09 Oct 2026 12:00:22 +0000
Files and hashes: 1: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: L60mScWG5Y69g6RCp4yGOFJTKAJk4JjnAQWQT9KVvSM=)
2: QBd5Wpp5kWkoCSM4_95uiC5JDV0.roa (hash: flLVepDAjYfRnttnJvSS11YgDPxXUtJLpwyzAOjne3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:62:d0:15:62:f1:6b:cb:89:c7:24:33:b7:39:79:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Oct 8 12:00:22 2026 GMT
Not After : Oct 9 12:00:22 2026 GMT
Subject: CN=d01e04efba4e65b1bcb7fb8279f1e3b66d10e185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:f5:0f:74:36:85:67:bb:01:3d:3f:83:91:
cf:64:b8:22:c5:a3:30:cc:84:c6:13:4e:10:0d:c4:
70:a7:fc:fe:cb:b0:32:a4:fe:a9:8b:39:23:88:64:
c1:5e:7e:22:74:09:57:d8:cc:af:78:48:b8:54:5a:
5f:0c:e8:b3:fc:bb:53:57:ff:1e:22:7d:bb:c7:61:
d0:c5:9d:8d:be:03:ba:7e:19:aa:43:43:96:ef:86:
60:72:c2:b0:a1:fe:ac:e0:9b:1b:b2:35:fe:b0:a7:
17:52:84:eb:d4:8a:26:41:da:90:ea:b0:54:ad:cb:
a7:23:18:78:95:dc:0a:1e:2f:c0:96:c0:f4:07:63:
eb:e2:20:89:1b:00:2b:03:c3:67:89:d6:a4:c2:c4:
c9:de:4b:0f:7f:e0:82:d9:1e:5e:01:5c:f9:53:15:
b6:98:85:8d:9b:25:81:59:68:8b:48:a0:f6:4c:c4:
e3:21:7d:fc:a0:d7:d8:bc:be:be:80:f6:d7:f9:4a:
c1:2b:91:52:28:9f:ee:38:7d:7e:f9:04:34:ac:35:
83:f9:54:c3:ea:67:4d:e3:73:82:d0:6a:57:f9:77:
f8:88:63:c4:34:ae:ad:03:ad:5d:c4:3c:df:b7:3e:
60:9f:ad:3f:a9:2b:42:3a:a0:33:ba:e0:3a:0c:6e:
4b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1E:04:EF:BA:4E:65:B1:BC:B7:FB:82:79:F1:E3:B6:6D:10:E1:85
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6e:25:16:03:74:38:01:e9:86:be:a5:9b:e5:1d:aa:41:a1:
93:f5:69:74:81:09:aa:53:c7:5e:12:63:90:bd:76:b8:cd:f7:
2a:77:33:0d:76:d5:06:6e:2e:5f:6c:e2:fa:1f:1b:96:96:e5:
4c:5b:19:7b:76:06:9d:14:1d:5e:78:4f:60:a7:87:77:38:71:
f4:84:5d:24:d9:46:f7:d9:10:7e:23:ef:16:9f:81:e5:ef:b0:
16:69:91:17:79:26:ad:ad:1a:fc:6a:a9:bd:03:bd:27:b8:69:
0d:9c:8f:ad:ba:82:43:93:89:9e:dc:d1:85:e2:4e:ee:27:bb:
bd:92:63:2c:81:9e:0d:3c:a7:14:c1:24:81:df:64:60:bc:59:
3a:37:37:51:0a:c2:b9:81:aa:bc:92:67:df:64:bf:ac:25:0f:
dc:10:6f:60:e9:74:ff:dc:e9:34:84:59:1a:f4:55:4c:e7:fc:
65:0f:74:ea:04:e8:f7:5c:0b:41:29:e2:43:09:b9:6a:6c:b2:
ef:a6:07:2f:1c:6b:92:19:d0:51:09:3e:ae:e6:36:08:0b:0c:
29:65:56:c9:7f:09:58:00:2f:78:9b:6b:83:b4:69:52:7e:c2:
4c:c1:bf:65:2d:31:a9:77:d3:93:49:e7:2f:18:a1:41:16:76:
00:93:3c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:53:07 2026 by rpki-client